$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/678af39a-5e17-309a-bf0e-05bdb8752922.roa File: 678af39a-5e17-309a-bf0e-05bdb8752922.roa (raw, json) Hash identifier: 0JhjSPtrI9wnRpGcaF7TlunW0SV88deXH45jQrmV/vI= Subject key identifier: D7:FD:E4:86:36:8A:0C:D4:E9:CF:48:06:38:4A:05:48:49:C5:21:E3 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B2996E52AAF84C837F8208980 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/678af39a-5e17-309a-bf0e-05bdb8752922.roa Signing time: Thu 11 Sep 2025 19:59:53 +0000 ROA not before: Thu 11 Sep 2025 19:59:53 +0000 ROA not after: Wed 10 Dec 2025 20:59:53 +0000 asID: 7385 IP address blocks: 142.111.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:29:96:e5:2a:af:84:c8:37:f8:20:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 11 19:59:53 2025 GMT Not After : Dec 10 20:59:53 2025 GMT Subject: CN=bf58e209-3ea7-497c-9748-e3bf5530e88a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:2e:51:6a:41:86:a5:13:ad:7b:34:38:6f: 87:1c:b8:4a:f7:4f:f2:20:fc:10:94:45:64:43:62: 09:8d:96:a9:58:67:96:35:ee:01:6c:c3:ad:b0:99: dc:7e:fa:13:aa:a0:7c:cb:f6:9a:16:db:fd:b2:68: 87:d1:05:18:ec:c3:4b:15:27:e4:b8:fe:45:f2:da: 44:cc:bf:b2:39:1c:09:7f:28:67:4b:9f:6d:8f:1a: ce:21:69:fb:3d:e5:34:36:df:58:cb:a0:08:14:f1: 04:2a:e6:10:ba:14:eb:29:91:76:53:a5:9b:54:54: 3c:50:54:79:38:aa:2f:cc:22:9b:94:92:67:b5:1a: 6d:99:cf:0b:07:08:d9:ac:4b:d2:dd:ed:8a:d7:a9: 32:47:f2:54:a1:f2:e0:51:c9:44:ff:37:25:25:46: 2e:ab:66:57:ab:64:9d:19:e4:76:22:60:db:67:6b: 5c:82:35:00:95:9b:18:a8:bd:6e:59:62:3c:7c:69: bc:e2:b8:51:af:1e:a4:06:98:04:91:38:1d:87:41: 58:72:3e:ec:5e:cb:96:a3:f1:61:b7:73:c0:21:e8: 74:86:92:12:5b:f1:29:b1:7b:b8:ae:1a:67:73:79: 8a:30:b4:82:62:26:b4:f5:a7:65:9f:2d:64:be:59: a6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FD:E4:86:36:8A:0C:D4:E9:CF:48:06:38:4A:05:48:49:C5:21:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/678af39a-5e17-309a-bf0e-05bdb8752922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:71:4e:f1:cc:47:43:0f:c4:d4:67:e4:f7:73:d9:01:92:ce: a9:7b:9f:5b:91:f9:25:d6:fb:b7:fd:3f:75:6e:ab:14:e1:25: b3:af:5d:e0:3e:8f:c8:de:be:82:c9:b1:7b:98:97:06:40:a0: c0:10:f1:c9:6e:d9:e5:e5:35:d6:45:67:0d:77:b9:b7:15:b2: 85:61:8e:fc:7d:5a:09:7c:ae:2d:2e:41:d5:b7:74:e6:d1:49: 43:e1:fd:31:58:ca:66:a5:06:ec:99:68:02:14:68:be:55:86: 22:d1:eb:75:a5:15:ba:8c:8a:fa:e9:17:53:b4:13:aa:b3:22: b9:e1:24:48:f8:75:84:56:aa:a8:2b:3f:ea:8f:11:81:ba:d8: 22:d3:b5:a3:fc:04:26:1a:a7:81:63:ed:8d:fe:f2:34:3f:ad: 38:a7:9d:c1:71:e9:78:42:4b:c4:9b:89:ea:70:bf:b2:fd:b3: 80:e8:a9:08:bb:8b:ac:dc:5b:2d:5f:c9:65:2f:47:42:39:c0: 0e:06:91:04:1b:eb:45:c2:e6:6e:3b:78:24:4b:a0:64:67:e1: 38:4c:dc:54:11:3d:56:80:e4:06:5b:4f:ac:64:03:4a:3d:4c: f0:93:5a:cf:5d:50:b6:ef:21:7f:59:e4:46:59:23:41:0a:4e: 7f:a3:80:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEspluUqr4TIN/ggiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkxMTE5NTk1M1oXDTI1MTIxMDIwNTk1M1owLzEtMCsGA1UEAxMk YmY1OGUyMDktM2VhNy00OTdjLTk3NDgtZTNiZjU1MzBlODhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvokuUWpBhqUTrXs0OG+HHLhK90/yIPwQlEVk Q2IJjZapWGeWNe4BbMOtsJncfvoTqqB8y/aaFtv9smiH0QUY7MNLFSfkuP5F8tpE zL+yORwJfyhnS59tjxrOIWn7PeU0Nt9Yy6AIFPEEKuYQuhTrKZF2U6WbVFQ8UFR5 OKovzCKblJJntRptmc8LBwjZrEvS3e2K16kyR/JUofLgUclE/zclJUYuq2ZXq2Sd GeR2ImDbZ2tcgjUAlZsYqL1uWWI8fGm84rhRrx6kBpgEkTgdh0FYcj7sXsuWo/Fh t3PAIeh0hpISW/EpsXu4rhpnc3mKMLSCYia09adlny1kvlmmBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNf95IY2igzU6c9IBjhKBUhJxSHjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjc4YWYzOWEtNWUxNy0z MDlhLWJmMGUtMDViZGI4NzUyOTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFxTvHMR0MPxNRn5Pdz2QGSzql7n1uR+SXW+7f9P3VuqxThJbOvXeA+ j8jevoLJsXuYlwZAoMAQ8clu2eXlNdZFZw13ubcVsoVhjvx9Wgl8ri0uQdW3dObR SUPh/TFYymalBuyZaAIUaL5VhiLR63WlFbqMivrpF1O0E6qzIrnhJEj4dYRWqqgr P+qPEYG62CLTtaP8BCYap4Fj7Y3+8jQ/rTinncFx6XhCS8Sbiepwv7L9s4DoqQi7 i6zcWy1fyWUvR0I5wA4GkQQb60XC5m47eCRLoGRn4ThM3FQRPVaA5AZbT6xkA0o9 TPCTWs9dULbvIX9Z5EZZI0EKTn+jgL0= -----END CERTIFICATE-----Generated at Mon Sep 15 10:49:35 2025 by rpki-client